$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/CRXLsQRRrtHkJAzab2YSWfhYqoU.roa File: CRXLsQRRrtHkJAzab2YSWfhYqoU.roa (raw, json) Hash identifier: jp/1xiEH43o7HGCOKGwgYpsZJqZzNdEVN+mef1wQIhs= Subject key identifier: 09:15:CB:B1:04:51:AE:D1:E4:24:0C:DA:6F:66:12:59:F8:58:AA:85 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 07EF Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CRXLsQRRrtHkJAzab2YSWfhYqoU.roa Signing time: Tue 30 Apr 2024 02:10:35 +0000 ROA not before: Tue 30 Apr 2024 02:10:35 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.105.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2031 (0x7ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:10:35 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=0915CBB10451AED1E4240CDA6F661259F858AA85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8a:f1:62:bd:c4:1d:32:3c:ad:50:c2:ae:ad: 45:d1:32:28:dc:73:80:c7:34:1e:f9:88:51:73:0a: 3c:0d:3b:af:9c:60:5d:3f:57:8f:1e:ca:ff:00:1b: 65:62:c4:68:17:8a:ac:d0:69:53:dc:be:c2:d4:e8: 23:98:a6:77:22:4f:66:33:db:12:b6:a0:08:d2:29: 16:41:a3:aa:b9:ee:71:07:7e:6f:10:46:5d:f4:87: 04:70:9d:ca:3b:59:01:2c:aa:3b:3d:71:77:11:9e: ff:f4:a8:a1:2e:57:ff:5f:74:cf:9d:88:fb:bc:ef: cb:91:9a:1c:b3:19:6e:bb:77:77:5c:07:ed:64:c7: f1:d0:41:52:dc:5d:e8:04:e8:5a:c0:37:eb:9a:d2: ac:a9:3a:09:e6:15:74:c9:9d:41:7d:07:27:60:45: 9c:62:e0:91:49:9c:1e:bf:ac:27:e3:89:6c:f2:9f: 48:2b:23:ce:e8:a8:90:cc:9b:87:c3:67:62:e8:d4: 81:87:b7:c1:19:18:5f:69:64:d0:42:94:99:36:f5: eb:4e:74:f2:50:8b:d1:73:e0:a1:ab:1e:a9:d8:03: f0:3d:a5:92:18:87:97:98:56:49:ad:d7:fd:60:21: 52:71:e2:6f:7c:79:95:2a:14:4b:13:51:47:72:d8: b6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:15:CB:B1:04:51:AE:D1:E4:24:0C:DA:6F:66:12:59:F8:58:AA:85 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CRXLsQRRrtHkJAzab2YSWfhYqoU.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.105.86.0/23 Signature Algorithm: sha256WithRSAEncryption a6:7d:29:f7:b5:9f:ea:34:5d:2e:0f:a4:e3:1e:9b:ca:e9:05: ae:0d:dc:4d:98:3b:9b:37:7f:16:1a:3e:23:e3:cb:a9:dd:f2: 74:15:c4:f2:b5:e0:87:bf:ea:60:10:db:80:b3:2f:05:b1:16: b1:c3:e5:38:ca:c2:80:ab:81:5d:0c:62:e0:eb:7d:e2:ec:86: 47:c7:aa:11:e8:64:5b:e7:29:bc:46:86:c5:26:20:4c:a6:14: c2:c5:31:da:64:67:63:c0:00:8c:d6:8a:b6:f1:4e:be:b9:65: 65:20:c0:e1:77:ad:84:32:28:7a:d7:9a:4c:65:f8:a1:a6:5d: cd:14:a6:5a:bf:f4:0e:c8:87:a9:e5:94:ac:f8:3f:aa:90:4d: 69:5d:56:0a:eb:d6:8a:15:f9:e6:4b:c8:0c:e2:6b:d2:9c:58: 9b:ec:43:a6:c8:39:2b:9c:cd:d4:8b:d5:0a:5a:33:14:85:52: f8:f4:0c:f3:c5:7a:d2:7e:ce:16:3b:3d:a7:f8:c2:9d:95:79: db:3a:11:82:b3:aa:43:51:e6:8c:33:a3:92:11:70:00:ee:4b: a5:f7:f8:cf:92:29:1e:1d:a9:b4:62:37:ba:3e:6a:5b:e8:56: 4d:48:2c:05:70:e3:df:b6:fe:92:88:14:d1:09:ee:2a:6f:41: e1:9e:dc:d6 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICB+8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjEwMzVaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA5MTVDQkIxMDQ1MUFF RDFFNDI0MENEQTZGNjYxMjU5Rjg1OEFBODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCXivFivcQdMjytUMKurUXRMijcc4DHNB75iFFzCjwNO6+cYF0/ V48eyv8AG2VixGgXiqzQaVPcvsLU6COYpnciT2Yz2xK2oAjSKRZBo6q57nEHfm8Q Rl30hwRwnco7WQEsqjs9cXcRnv/0qKEuV/9fdM+diPu878uRmhyzGW67d3dcB+1k x/HQQVLcXegE6FrAN+ua0qypOgnmFXTJnUF9BydgRZxi4JFJnB6/rCfjiWzyn0gr I87oqJDMm4fDZ2Lo1IGHt8EZGF9pZNBClJk29etOdPJQi9Fz4KGrHqnYA/A9pZIY h5eYVkmt1/1gIVJx4m98eZUqFEsTUUdy2LanAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUCRXLsQRRrtHkJAzab2YSWfhYqoUwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0NSWExzUVJScnRIa0pBemFiMllTV2ZoWXFvVS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAExaVYwDQYJKoZIhvcNAQELBQADggEBAKZ9Kfe1n+o0XS4PpOMem8rpBa4N 3E2YO5s3fxYaPiPjy6nd8nQVxPK14Ie/6mAQ24CzLwWxFrHD5TjKwoCrgV0MYuDr feLshkfHqhHoZFvnKbxGhsUmIEymFMLFMdpkZ2PAAIzWirbxTr65ZWUgwOF3rYQy KHrXmkxl+KGmXc0Uplq/9A7Ih6nllKz4P6qQTWldVgrr1ooV+eZLyAzia9KcWJvs Q6bIOSuczdSL1QpaMxSFUvj0DPPFetJ+zhY7Paf4wp2Veds6EYKzqkNR5owzo5IR cADuS6X3+M+SKR4dqbRiN7o+alvoVk1ILAVw49+2/pKIFNEJ7ipvQeGe3NY= -----END CERTIFICATE-----Generated at Sun Feb 16 22:10:05 2025 by rpki-client